AU2007276440A1

AU2007276440A1 - Method for operating a wind energy installation

Info

Publication number: AU2007276440A1
Application number: AU2007276440A
Authority: AU
Inventors: Roland Weitkamp
Original assignee: Repower Systems SE
Current assignee: Senvion GmbH
Priority date: 2006-07-21
Filing date: 2007-07-05
Publication date: 2008-01-24
Also published as: JP2009544880A; CN101490411B; CN101490411A; WO2008009354A2; EP2044325A2; DK2044325T4; US8169097B2; DK2044325T3; EP2044325B2; JP5191061B2; WO2008009354A3; DE102006034251B4; EP2044325B1; DE102006034251A1; ES2392881T3; DE102006034251B8; US20100013227A1; CA2655637A1; ES2392881T5; CA2655637C

Description

i suI uraibiatiui IrumI UerTIadn [U Engiisn consisrs or js pages 5 10 Method for the Operation of a Wind Power Plant Description 15 The invention relates to a method for the operation of a wind power plant, wherein in particular the wind power plant will be or is shut down after a shutdown signal is triggered by a safety shutdown device that is logically superordinate to an operating control system. 20 The invention also relates to an energy supply system with at least one wind power plant. Moreover, the invention relates to a safety chain on a wind power plant and a wind power plant. As a general rule, a generic wind power plant has a rotor, at least 25 one angle-adjustable rotor blade, a mechanical brake device for braking the rotor and an operating control device and a safety system. The mechanical brake device engages in the case of a wind power 30 plant with gearbox on the quickly rotating side of the drive train. The generator with its rotating part called a runner is also located on this side. The mechanical brake device can also be arranged on the v Oberse, Kevin Lossner % 16540 Hohen Neuendorf U2 Teleton ~)+49(0)3303 50 88 57 -2 slow side of the drive train, i.e. on the side between the gearbox and rotor blades. But the wind power plant can also be designed without a gearbox so that the brake engages in the area of the rotor hub or the generator rotor. Within the scope of the invention, the 5 term rotor refers in particular to the terms drive train, fast shaft, generator rotor, gearbox, rotor shaft (= slow shaft), rotor hub and rotor blades. A braking of the rotor means in particular the braking of the drive train. 10 Methods for the operation of a wind power plant and wind power plants are generally known. Refer, for example, to the textbook entitled "Windkraft Systemauslegung, Netzintegration und Regelung" (Wind Power System Design, Grid Integration and Control), Siegfried Heier, 4th Edition, B.G.Teubner, February 2005. 15 The operation of wind power plants and wind power plants themselves is critical in terms of their design, in particular with respect to safety concerns. In particular in the case of strong winds in connection with a network outage, in which the aerodynamic 20 torque created by the wind in the rotor meets no resistance from the generator, it can lead to extreme tower loads, in particular tower base bending torques, uncontrolled blade angle adjustments and, if necessary, even the triggering of a safety chain. Due to the failure of the network or more generally due to a load shedding of the 25 generator, the rotor begins to accelerate in strong wind until the brake system of the wind power plant begins to brake the rotor. Depending on the strength of the brake power, loads of varying strengths are exerted on the wind power plant. 30 Moreover, a wind power plant has a safety concept and a corresponding safety system. Here the safety concept includes all devices, modes of operation and handling instructions that ensure a .qer Obe K Kevin Lossner 9 ~1 6 S 4 H O ,.ra J CD 4 oen Neuendor..f) - Teiefon +49(0)3303 50 885 -3 wind power plant remains in a safe state even when malfunctions occur and the operating control system fails. The safety system of a wind power plant has devices that are 5 logically superordinate to the operating control system. Overall, the safety system cannot be deactivated by an undesired intervention or an unintentional operation. The system is activated when safety relevant threshold values are exceeded or the operating control system loses control of the wind power plant, with the unit unable to 10 be maintained in the operating range. The safety system also includes devices that prevent an unwanted startup of the wind power plant, e.g. for maintenance work or suchlike. The safety system usually also includes a safety chain, where the 15 safety chain is a vital facility of the wind power plant. If a safety relevant threshold value is exceeded, the protection devices are triggered by the safety chain, regardless of the operating control system. Protection devices in this connection are the aerodynamic and/or the mechanical brake system, the devices for network 20 separation of the generator or of the generator/converter system and the emergency shutdown protection devices or safeguards and the main switch. Moreover, a safety device for a wind power plant is known from DE 25 U-20 2005 014 629. Furthermore, a method for the monitoring of a wind power plant and a wind power plant are disclosed in DE-C-101 15267. The object of the present invention is to ensure the safe operation 30 of a wind power plant, in particular after a safety shutdown triggered by a safety chain. Sdigter 0 76 54 0 0 r S a s e Cfl O/ eO 9 ~~9o 3 ~jetoL eJ~,,~ -4 The object is solved by a method for the operation of a wind power plant, wherein in particular the wind power plant will be or is shut down after a shutdown signal is triggered by a safety shutdown device that is logically superordinate to an operating control system, 5 which is further established in that the wind power plant is released for operation after a shutdown by means of an operating device that is spatially separated or external to the wind power plant. According to the invention, the timely restart of a wind power plant 10 will be possible after a safety shutdown. The wind power plant hereby has a rotor with at least one rotor blade, a brake system with an auxiliary power supply and a safety system with a safety sensor system and at least one emergency shutdown switch and a control device with a memory for the recording of operating data. The 1s control device is hereby connected with the operating device that is spatially separated or external to the wind power plant, for example in a remote monitoring control center, for the (re)start of the wind power plant. The connection between the wind power plant and the operating device, which is not part of the wind power plant or is not 20 directly or immediately provided or arranged on the wind power plant, can be produced temporarily for a predetermined period of time, for example during the shutdown phase of the wind power plant. Naturally, it is possible in the scope of the invention that the wind power plant is permanently connected with the operating 25 device online in the remote monitoring control center. Through the operating device according to the invention, a remote operation of the wind power plant is possible, wherein after a correspondingly positive check of all important operating data that is 30 available on the operating device or that is transmitted to the operating device after the safety shutdown, a restart of the wind power plant is initiated or triggered or started. For this, a remote 1 r - tInO-snr ,~ Cn 489 a)/.9 C Of? UZ3-1 -5 monitoring control center in which the operating device is located is notified after a triggered safety shutdown, automatically for example. 5 The safety shutdown device is a device that is logically superordinate to the operating control system, which monitors compliance with safety-critical threshold values of the wind power plant independently of other operating controls and triggers a safety shutdown when one of these threshold values is exceeded. This is 10 in particular necessary when the operating control system of the wind power plant is not able to maintain the wind power plant in the normal operating range during serious failures. The safety shutdown device also keeps the wind power plant in a safe system state in the case of a failure of the operating control system. 15 A safety shutdown of a wind power plant can be triggered above all due to excess rotation speeds, vibrations, errors in the control hardware and/or control software and in the case of excessive cable twisting in the tower head. For this, the safety chain on the wind 20 power plant has for example a wired switch, in particular a hard wired one, in which all contacts for triggering an "emergency off" for an emergency shutdown device or a "safe off" of a safety shutdown are connected in series. 25 For the triggering of a "safe off", the safety chain has contacts to an overspeed switching device of the rotor and to the generator speed, a vibration switch, etc. The safety shutdown ensures that the wind power plant cannot be restarted without employees or operating personnel or maintenance personnel onsite, if there is a system 30 critical error. For the triggering of an "emergency off", emergency shutdown 9ter Obe,, 1650 Oh_ 4 749 eetol e S7~ -6 buttons are provided, for example on the top box, in the rotor hub, in the vicinity of the rotor bearing and in the tower base on the converter box and a service switch, which is used, for example, in the maintenance of the blade adjustment system. 5 After the safety chain is triggered, there is now the advantage according to the invention that the safety chain is reset via remote operation or remote control in the form of the operating device provided away from the wind power plant. This causes a manual 10 reset of the wind power plant to take place from a distance, i.e. without manual contact with the wind power plant itself. The safety chain has, as is generally known, a corresponding sensor system or corresponding sensors for the excess rotation speeds, vibrations, control ("watch dog" function) and, if applicable, for cable twist. 15 After the safety system has been triggered, the rotor is braked, in particular preferably by bypassing the operating control device. The operating control device can also be part of the safety system or the safety system can be part of the operating control device such that 20 the operating control device does not necessarily have to be bypassed for braking after the safety system has been triggered. Before restart after a safety shutdown, one or more test steps are executed in the remote monitoring control center. This preferably 25 involves a reading of the error memory, a check that there are no people onsite (human safety), a visual outside inspection of the wind power plant by at least one camera and a visual inspection, in particular of the rotating parts of the drive cabinet, by means of at least one camera in order to ensure that all inner and outer unit 30 components are in place and functional. This check must only be performed by a limited group of experienced, authorized people in the remote monitoring control center, who have appropriate access ~\Lr tOberse 4 Kevin Lossner 9 - D orastraee 9 ( ~16540 Hohen Neuendorf 0 Tel efon +~ 49(03303 50 8357 r, ,IZ J -~ -7 rights to the operating data and to the operating device. After a positive check of the operating data, the wind power plant is released for operation after the safety shutdown. It is ensured through the access rights selected or the authorization of 5 predesignated persons that a reset of the wind power plant is not performed by accident or by inexperienced persons. Moreover, before the restart of the wind power plant, the blade adjustment systems as the primary and secondary braking system 10 and their auxiliary power supplies (pitch batteries) are also checked; these checks can also be performed automatically by the operating control system. Optionally, it can also be ensured on the inside of the hub, for example with a pivotable camera, e.g. a web cam, that a blade adjustment is not just blocked or stiff due to loose 15 hub components. Moreover, a check of the network parameters ensures that generated electrical power can be supplied to the network. The risk of overspeed is thus virtually eliminated. A visual outside inspection of the wind power plant or its individual 20 parts ensures a general integrity of the overall structure, in particular also of the rotor blades. This preferably takes place using a camera on a neighboring wind power plant. Alternatively, the observation can also take place with a camera fastened on the rear nacelle part or potentially also on an extension arm, with the rotor 25 blades then preferably guided through the visual range of the camera by slowly trundling the rotor. In particular, all rotating parts inside the nacelle, e.g. the rotor shaft or axle trunnions, in the case of gearbox machines the coupling to 30 the gearbox and the gearbox output, the mechanical brake, the generator coupling, the generator and possibly the generator gap as well as a slip ring unit, are visually inspected. Moreover, the ,%t~er Ober, Z- 1654( orastrafi9 5 HOhen) N CD 0) .49(Q efon 3 88

C.,.

structural integrity of other components in the nacelle are checked, such as the control cabinets, transformer, converter, yaw system, generator and gearbox cooler. If the power module is housed in the tower base or in a separate transformer station, other cameras are 5 also arranged there as part of the inventive scope. In a preferred embodiment, after a release of the wind power plant by the operating device, the rotating parts of the wind power plant are visually monitored during the slow startup of the drive train in 10 order to identify potential imbalances or vibrations. In order to ensure a sufficiently high image transfer rate, an offline data transfer to the remote monitoring control center with the operating device may be required, so that operating data (below the rated speed) is recorded during a startup of the wind power plant. The 15 machine is then shut down again or held in an uncritical state so that there is sufficient time for a transfer or assessment of the data in the remote monitoring control center. The wind power plant is only released for normal operation after another positive check. 20 In addition to a mass imbalance, the monitoring measures cited also exclude an aerodynamic imbalance. Moreover, rough blade angle asymmetries are identified using the cameras installed in the hub, while finer asymmetries are excluded by software monitoring based on an actual value sensor system. A rough false position of the yaw 25 control can also be excluded by a camera pointed at the wind vane or by pivoting the existing outside camera to the wind measurement sensor system. An icing of the wind sensors or other damage to the wind sensors is also excluded here in a visual manner. Furthermore, excessive cable twist can be checked by means of the installed 30 cameras or sensors and a cable limit switch. The advantages of the invention are that downtime after a safety et UbersL Kevin Lossner 0 orastrate 9N e d 16540 Hohen Neuendo cf (D Telefon : +4))9(0)3303 50 88 57 I rb -9 shutdown by the safety chain is shortened, since the wind power plant is reset via remote monitoring or remote control by means of the operating device without employees resetting the wind power plant manually onsite. This is particularly important if the safety 5 chain was triggered by faulty activation, e.g. by a sensor error or a contact error. The remote reset even increases human safety since operating personnel onsite do not need to climb into the machine nacelle, which leads to further time delays, since a climb of this type is time-consuming. Instead, the wind power plant is released without 10 operating personnel having inspected the wind power plant onsite. Furthermore, the personnel in the remote monitoring control center are considerably more experienced in the assessment of the recorded operating data than the service personnel onsite, who primarily deal with maintenance and repair work. 15 If there was an analysis in the remote monitoring control center to determine that there is no wind power plant state that endangers the unit or its main components, the safety chain is reset via the operating device, and it is not possible to bypass the sensors of the 20 safety chain. It is thus ensured that the safety chain can only be reset when all sensors are error-free. In accordance with a preferred embodiment, it is provided that after the shutdown and before the release of the wind power plant, the 25 wind power plant is checked based on predetermined, in particular current, operating data about and/or from the wind power plant. The operability of the wind power plant is checked by doing so. For this, the corresponding data or image data are preferably updated and transferred to the operating device. At the same time, the error 30 memory on the wind power plant is also read in order to check the operating data. A: r Ubers, '' Kevin Lossner . 16540 Hohen Neuendof (:D3 +4()33 50 88s 57 '9Jo . o rb -10 In particular, the presence of persons on and/or in the wind power plant is checked after and/or during the shutdown of the wind power plant, so that the wind power plant is only released for operation after a safety shutdown if there are no people in the vicinity of or in s the wind power plant. The determination whether there are employees or operating personnel located onsite preferably takes place automatically. For this, motion sensors, photoelectric relays, door or hatch closure functions and switches are provided, for example, in the climb protection on the tower platforms and in the 10 drivable unit. If it is determined based on the corresponding sensors that there are people in or on the wind power plant, it is not possible to release the unit for restart. In a preferred embodiment, the release of the wind power plant is 15 documented, wherein the documentation of the release takes place with date, time and error identification in the form of an error code and if possible with information for the authorized person who remotely reset the wind power plant after checking the safety relevant data. 20 Moreover, it is preferred if the wind power plant is released for operation after the unlocking of a security code, particularly one which is person-related and/or functional-error-related and/or hardware-related. After entry of a corresponding security code on 25 the operating device, access is only possible for a limited group of experts that have authorization to release a wind power plant after a safety shutdown. In this case, the security codes can be both person-related, i.e. that only specially authorized people can grant the release, and error-related, so that, after the detection of an 30 error, the error can only be resolved via the then-released operating device using a special security code. 6pjgter bo, 00 10 Sr 4 .e

AC

-11 The person-related security codes also include hardware-related embodiments, e.g. hardware dongle (copy protection plug) or key operated switches that can be inserted into the operating device. 5 Within the scope of the invention, it is also conceivable that several security codes or authorizations are present in the form of a hierarchy in order to increase security so that, for example, the unit is checked after a first authorization in the remote monitoring control center and only after a positive check is the entry of another 10 authorization, perhaps by another person, required in order to restart the wind power plant. It is suggested according to an advantageous embodiment that the operating device is notified after and/or during a shutdown of the 15 wind power plant. A message is hereby automatically transmitted to the remote monitoring control center after a safety shutdown, wherein an error list for the error message can also be included. Within the scope of the invention, it is possible that this type of notification also takes place via appropriate wireless 20 communication, e.g. SMS or suchlike. It is provided in an advantageous embodiment of the method that the number of releases of the wind power plant will be or is limited within a predetermined period of time so that another release is not 25 possible after the releases have been exceeded within the period of time. This increases the safety of a wind power plant since, after the permissible number has been exceeded, the service personnel onsite must first perform an inspection or safety check of the wind power plant. 30 In order to further increase safety, an advantageous embodiment provides that a check logic is saved in the operating control system r Oberse b Kevin Lossner 16540 Hohen Neuendort z Telefon 6)+49(0)3303 50 a8 57 z -12 that links the different aforementioned checks and only enables the remote reset if all checks were performed successfully and confirmed. In particular, one part of the required checks, e.g. the check of the network parameters or the state of the auxiliary power 5 supply, can be performed automatically or semi-automatically by the operating control system. However, fundamentally the subsequent release of the remote reset is performed by a specially skilled person. 10 Moreover, the object is solved by an energy supply system with at least one wind power plant, which is further established in that an operating device that is in particular spatially separated from the wind power plant is provided such that the wind power plant will be or is released for operation by means of an operating device after a 1s safety shutdown triggered by a safety shutdown device that is logically superordinate to an operating control system. In particular, a locking device is provided on the wind power plant, wherein upon activation of the locking device a release of the wind 20 power plant will be or is blocked by means of the operating device. The locking device on the wind power plant blocks active access of the operating device to the safety chain so that a reset of the safety chain or the safety shutdown can only be performed by the operating device after release by the locking device. 25 The locking device is preferably designed as a service switch. The locking device is designed as a service switch and serves so that the maintenance personnel onsite can ensure that a safety chain triggered for maintenance purposes onsite is not accidentally 30 cancelled by a reset of the operating device. The service switch can also be designed as a "manual stop" switch, positioned, for example, in the tower base and/or in the nacelle of the wind power &\;er Lbers Ossner 9 ~ OoO 65 4 ,1OaStr,8,9 . hrNeuendorf Z -13 plant, wherein the switch then includes the dual function of stopping the wind power plant and activating the locking device. It is also preferred if, upon activation of the locking device, the 5 access of the operating device to the reset function of a safety chain and/or a safety system of the wind power plant will be or is blocked. In particular, the reset function of the safety chain or the safety system is blocked on the operating device. For this, a corresponding device for the blocking of the active access, in particular for the 10 blocking of the reset of a safety shutdown, is provided on the operating device. Alternatively, the activation of the locking device can also take place in that maintenance personnel log into the operating control 15 computer in the wind power plant via a control terminal. This activation can occur, for example, from control terminals in the tower base or in the nacelle of the wind power plant. Another embodiment of the invention provides that in the case of a 20 reset of the safety chain or a release by the operating device an acoustic and/or optical signal is given by the wind power plant. In particular in the areas visited by people for maintenance purposes, e.g. inside the tower, machine nacelle, rotor hub, this type of signal warns any personnel who may be present after all. Alternatively or 25 additionally, a signal can also be sent to a receiver (wireless receiver, "beeper") that is generally carried by people in the area of the wind power plant. These measures minimize the risk to people from the wind power plant who were accidentally not detected by the aforementioned measures in the case of a remote reset. 30 Furthermore, according to the invention, the energy supply system is operated according to the method described above. terUbe, ~, ~ Ohe4IVe 9 )aaoa.., -14 The object is also solved through a wind power plant, which is designed or equipped with a locking device described above, wherein upon activation of the locking device a release of the wind 5 power plant by means of an operating device will be or is blocked after a safety shutdown by a safety chain or a safety system. A reset after a safety shutdown is blocked by this. A reset or a release of the wind power plant is only possible after deactivation of the locking device. 10 Furthermore, the wind power plant or the energy supply system is further established in that after an activation of the locking device the operating device for the release of the wind power plant is or will be unlocked after entry of a password or transmission of an 15 authorization. After a check of the important operating data of the unit by a particularly qualified employee, for example remotely, the wind power plant is released for restart remotely using a specially protected access right of prespecified experts in the case of the positive check of important operating data. 20 Additionally or alternatively, it can be provided in the case of the wind power plant or the energy supply system that, after activation of the locking device after checking for the presence or absence of persons in and/or on the wind power plant and after determination of 25 the absence of persons, the operating device is or will be unlocked for release of the wind power plant. The following steps are performed in doing so: a check that there are no employees in and/or on the wind power plant and/or that no "emergency shutdown" has taken place; a remote check of operating data, 30 particular important data for the system by a particularly qualified employee in the remote monitoring control center; and, in the case of a positive check, remote release of the system for restart. Obersety I l~r OSSr~er OD ttae 9 e3,dot (a 16 5 4 0 Zn -vkiOO .8 5B -15 The object is also solved in that a safety chain of a wind power plant is further established in that a reset switch is provided, which is or will be activated after triggering of a safety shutdown of the wind 5 power plant by means of or in connection with an operating device that is spatially separated from the wind power plant, such that the wind power plant is released for operation after the safety shutdown. 10 According to the invention, a safety chain, by means of which a safety shutdown of the wind power plant takes place, thus has a type of remotely operated reset switch, which will be or can be switched in connection with the operating device in a remote monitoring control center so that, after a triggered safety shutdown, 15 the restart of the wind power plant is released after several checks have been performed on the operating device in the remote monitoring control center to determine whether the wind power plant is in a functional and error-free state. 20 The safety chain is also further established in that at least one manually activatable switch of an emergency shutdown device is provided, such that after manual activation of the switch a safety shutdown of the wind power plant is triggered. Voltage-carrying parts of the wind power plant are rendered voltage-free and/or a 25 brake program for the rotor blades of the wind power plant is triggered by activating a switch. The safety shutdown by the emergency shutdown device is triggered in particular by operating personnel or maintenance personnel at a wind power plant. For this, there are several manually activatable switches, for example near 30 rotating parts, in the top box, in the ground box, near the converter, etc. Moreover, a manually activatable switch is also a service switch designed as a key-operated switch, which effectuates a safety Oberse/Z 1 KevinLossner D eendo S1 6540 Hohe" -16 shutdown of the wind power plant with a key after manual rotation. In accordance with a preferred embodiment, it is further suggested that at least one switch of a safety shutdown device that is 5 activatable by a sensor is provided such that after activation of the switch a safety shutdown of the wind power plant is triggered. For example, cable twist is monitored using sensors. Furthermore, the vibration of the wind power plant is recorded as well as an 10 overspeed of the rotor and an overspeed of the gearbox and the controller is recorded with the help of a "watch dog" for each sensor. In particular, parts of the machine are hereby monitored that could cause any damage to the nacelle. 15 Furthermore, the at least one switch of the emergency shutdown device or several switches of the emergency shutdown device and the at least one switch of the safety shutdown device or several switches thereof are series-connected in particular. This ensures secure operation of the safety chain. The safety chain preferably 20 has several reset switches so that, in addition to the reset switch, which is switched by the operating device in the remote monitoring control center, at least one other reset switch is provided. Such reset switches can be manually or automatically activated. One example of an automatically activatable reset switch is the reset 25 switch for the network return if the network of the wind power plant was disconnected for an otherwise error-free wind power plant. Manual buttons as reset switches can, for example, be provided in the top box or in the ground box as well as at other locations in the 30 wind power plant. The reset switches are connected in parallel with respect to each (Oberset ty ei iossne 1e1f 3 6) as ( * doti 1640iole J~ue 6 -17 other in order to enable a reset of the safety chain independently by each reset switch. Through the emergency shutdown device and/or the safety 5 shutdown device, corresponding brake programs are triggered for the moving parts of the wind power plant. In order to ensure for reasons of safety a shutdown of the unit after the triggering of a safety shutdown or a corresponding switch in the case of the failure of a relay as well, the emergency shutdown device and/or the safety 10 shutdown device each preferably have at least two switch relays. Furthermore, in accordance with one embodiment, a release of the wind power plant by the operating device is blocked in the case of an emergency shutdown by the emergency shutdown device. A 15 remote reset is not possible after an emergency off until the "emergency off" is deactivated onsite. Moreover, the safety chain is characterized in that, in the case of an emergency shutdown by the emergency shutdown device, the rotor 20 is brought to a standstill by means of brake devices, in particular mechanical ones, and/or components are rendered voltage-free. If technically possible, all components are preferably rendered voltage-free. 25 In contrast, in the case of a safety shutdown by the safety shutdown device, the rotor is only brought into a low-load mode or state, in particular a trundling state, by brake devices. In accordance with the invention, the emergency shutdown device 30 and/or the safety shutdown device have a different form of safety shutdown: In the case of the safety shutdown, the plant is transferred to a safe system state through the activation of the Oberse Kevin Lossner % DorastraBe n 16540 Hohen Neuendorf TeltnfO '.+49(0)3303 50 88:!57 -18 brake systems, in particular the blade adjustment. However, the rotor is not brought to a standstill, but rather remains in the low-load trundling state. Furthermore, not all systems are rendered currentless; the yaw control system system remains active, for 5 example. Moreover, a remote reset according to the invention is possible after a corresponding check. In the case of the emergency shutdown device, the mechanical brake device is also directly activated in order to bring the rotor to a 10 complete standstill as quickly as possible. Furthermore, if possible, all components are rendered voltage-free, i.e. systems like the yaw control are deactivated. The only exception is systems like the auxiliary power-buffered blade adjustment, which must also be operated electrically when the safety chain is triggered, in order to 15 move the rotor blades into the brake/feathering position. The stacking of the two safety chain functions - emergency shutdown device and/or the safety shutdown device - is implemented by series connection with intermediate pickup by the 20 emergency off relay. A power supply, in particular an uninterruptible power supply, is also preferably provided for the safety chain, whereby a reliable operation of the wind power plant or the safety chain is attained. 25 It is also beneficial if the safety chain is designed as a wired switch, in particular a hard-wired switch. This measure ensures maximum safety even after lightening strikes. 30 Furthermore, the object is solved through a wind energy unit which is designed with a safety chain according to the invention described above. Oberset ."' dOt"'0 Ie~faOtf 5ue" o r~e ' -19 The invention is described below, without restricting the general intent of the invention, based on exampless with reference to the drawings; we expressly refer to the drawings with regard to the 5 disclosure of all details according to the invention that are not explained in greater detail in the text. These show in Fig. 1 a schematic representation of a wind power plant; 10 Fig. 2 a schematic block diagram of the main components of a wind power plant and Fig. 3 a schematic circuit diagram of a safety chain. 15 In the following figures, the same or similar types of elements or corresponding parts are provided with the same reference numbers in order to avoid the need for redundant presentation. Fig. 1 shows a schematic representation of a wind power plant 10. 20 The wind power plant 10 has a tower 11 and a rotor 12, which comprises three rotor blades 14, which are attached to a rotor hub 9. The rotor hub 9 is connected to a rotor shaft 13. When the wind blows, the rotor 12 turns in a known manner. Power from a generator connected to the rotor 12 or via the rotor hub 9 and the 25 rotor shaft 13 can be created this way and delivered to a consumer network. Fig. 2 shows a schematic view of main components of the wind power plant 10. An operating control 15, which can also be called 30 the operating control device or the operating control system, controls and/or regulates the operation of the wind power plant 10. Coordinate to the operating control 15 is a safety monitoring system e Oberse i Kevin Lossner orastraBe dor e 6 0 Hohen Neu ' .49(0)3 o s57 -20 16, which is connected with a safety chain 20. The safety chain 20 comprises, for example, a vibration detector, a manual (emergency off) switch and a rotation speed switch relay. The safety chain 20 serves to shut down the wind power plant to a non-critical state in 5 the case of the occurrence of a safety-relevant event, for example for large vibrations or the activation of the emergency off switch by operating personnel. The safety chain 20 can be designed as a hardware chain. 10 In the case of the triggering of the safety chain 20, the generator 23 is removed from the network 25, which is indicated by the arrow to the electrical components 21 and the rotor shaft 13 or the fast shaft 22 is braked, for example via the blade adjustment 18 or the mechanical brake 19 or also, which is not shown, immediately 15 bypassing one or more regulation or control devices such as the regulation device 17. This safety monitoring system 16 can also be designed such that it checks the operating control 15 for functionality. The safety monitoring system 16 is thus preferably designed as a type of watch dog. The operating control 15' can, as 20 shown by the dashed line, also comprise the safety monitoring system 16. This is then an operating control 15' with an integrated safety monitoring system 16. Moreover, the safety chain 20 is with the operating control system 25 or the operating control 15, 15', which will be or is connected with an external operating device 41 during a safety shutdown. The operating device 41 is located outside of the wind power plant 10, for example in a remote monitoring control center, operating device 41. After the triggering of a safety shutdown via the safety chain 20, 30 a message is sent to the operating device 41, so that it is registered in the remote monitoring control center that the wind power plant has been shut down. &ger Uberse Kevin Lossner 164Qorastra~e 9 C 164 Hohen Neueo~dorft Telefon S n e

+

49

(

0 )3303oa 50885 -21 After the safety shutdown, a remote query of important operating parameters is performed so that it can be checked based on this operating data whether a restart of the stopped wind power plant 10 5 is possible. For this, visual recordings of the operating control 15, 15' are transmitted to the operating device 41 via external cameras 42 on the nacelle or on a neighboring wind power plant or via internal cameras 43. 10 Within the scope of the invention, it is possible that not just one but several cameras 42 are arranged outside the nacelle and inside the nacelle at safety-relevant locations, which transmit corresponding image data to the operating device 41. Based on the current operating data or image data, corresponding checks are performed 15 by operating personnel in the remote monitoring control center, wherein appropriately authorized persons can grant a reset or a release of the wind power plant 10 after a safety shutdown only after ascertaining that the wind power plant 10 is operating properly and after entry of one or more corresponding security codes on the 20 operating device 41. Furthermore, it is determined by means of corresponding sensors on or in the wind power plant 10 whether there are people on or in the wind power plant 10. This type of sensor is indicated 25 schematically in Fig. 2 and is provided with reference number 44. For example, sensor 44 is designed in the form of a movement sensor or suchlike and is connected to the operating control 15, 15'. The operating control 15, 15' is connected with a controller 17 and 30 the blade adjustment 18 and also with the mechanical brake 19 via corresponding electronic data lines. Blade adjustment 18 is in particular an actuator, which ensures the blade adjustment of the iOberse ~1 6 5 4 0 "Oe 8eeln81 - 22 rotor blades 14. Accordingly, a mechanical brake 19 is an actuator, which makes sure that the mechanical brake 19 in this embodiment acts on the fast shaft 22. The mechanical brake 19 can also act on the rotor shaft 13, but this is not shown. 5 Reference number 26 indicates a data connection, which conveys a rotor blade angle or the rotor blade angles of the rotor blades 14 to the operating control 15 or 15'. Reference number 27 shows a data connection, which conveys an actual rotational speed of the fast 10 shaft 22 to the operating control 15 or 15'. Moreover, the shaft 22 or a sensor on the shaft 22 is connected with the safety chain 20 via a connection line 32, wherein a corresponding signal is transmitted from one sensor (not shown here) to the safety chain 20 after the detection of overspeed via the connection line. As a result, a safety 15 shutdown of the wind power plant is triggered, for example, by the safety chain 20. Reference number 30 indicates a data line, which conveys an interference signal, which in this embodiment is emitted by electrical components 21, to the operating control 15 or 15'. 20 The communication of the operating device 41 with the cameras 42, 43 and the sensor 44 in or on the wind power plant takes place in the embodiment in Fig. 2 via the operating control 15, 15' or the operating control system. Alternatively, an additional communication device can also be present for this. Furthermore, direct 25 communication could also take place between the cameras 42, 43 and the sensor 44 and the operating device 41. After a safety shutdown has been triggered by the safety chain 20, a corresponding message or a signal is sent to the operating device 30 41 via the operating control 15. Alternatively, a direct connection line 33 can also be provided between the safety chain 20 and the operating device 41. Then the operating device 41 communicates (jberset20 C" -n t 1 -5 CD -23 with the operating control 15, 15' via the connection line 34 in order to receive current operating data or additional data from there, which can undergo a detailed assessment in the remote monitoring control center. 5 The wind power plant 10 operates as follows. The rotor 12 is turned according to the rotation direction 29 when the wind blows (reference number 31). The rotor shaft 9 thus also turns, which turns the fast shaft 22 with a gearbox 24 in a transmission ration of 10 1:100, for example. This generates an electrical voltage in generator 23, which is regulated, converted and/or transformed into an alternating current voltage in the electrical components 21. At the output of the electrical components 21, a connection to the network 25 is provided, with which the consumers are supplied with voltage 15 or electrical power. Generally known regulation and control concepts for wind power plants are disclosed, for example, in chapter 5 of the textbook entitled "Windkraftanlagen Systemauslegung, Netzintegration und Reglung" (Wind Power Plants, System Design, Grid Integration and Control) by Siegfried 20 Heier, which is cited above. Fig. 3 shows a schematic representation of a safety chain 20, which is used in a wind power plant, shown in the example in a currentless state. 25 The safety chain 20 is a wired switch, particularly a hard-wired switch, which has an uninterruptible power supply 45. These types of so-called "UPSs" are known to a person skilled in the art. A battery can also be provided as a voltage supply, for example. 30 The series-connected manual switches 46.1, 46.2, 46.3, etc., which are arranged as emergency off switches on the top box, on the SObers 0 ~ Kevin Lossner 'a; Oorastra~e 16540 Hohef Neuendori (0 Telefon 9+49(03O5088~ 57 - 24 ground box, in the tower base and on the converter cabinet and at other locations on and in the wind power plant, are connected to the power supply 45 in the case of an emergency shutdown device NA. Moreover, another key-operated switch 47 is series-connected to 5 the other manually activatable switches 46.1, 46.2, 46.3, etc., which is activated by means of a corresponding key by maintenance personnel. This type of key-operated switch 47, also called a service switch, is for example provided in the top box (control cabinet in the nacelle) for the maintenance of the blade adjustment 10 device. The emergency shutdown device NA shuts down all voltage-carrying parts and all rotating parts. The voltage-carrying parts are rendered as voltage-free as possible upon actuation of the emergency 15 shutdown device NA. The switches are opened through activation of one of the switches 46.1, 46.2, 46.3, .. 47 so that a safety shutdown of the wind power plant takes place. This "emergency off" opens the connected relays 48, 49 (failsafe arrangement). 20 When the loop is interrupted, the self-holding relays 48, 49 fall so that a safety shutdown takes place. As an example here, the relays 48, 49 control the brakes of the wind power plant and trigger a brake program, for example. 25 Furthermore, additional switches 56.1, 56.2, 56.3, etc. of a safety shutdown device SA are series connected to the manually activatable switches 46.1, 46.2, 46.3, .. 47, wherein the switches of the safety shutdown device SA are switched by means of sensors. The sensors for the switches 56.1, 56.2, 56.3, etc. monitor moving 30 parts or suchlike in the machine. For example, the cable twist (clockwise and counter-clockwise) is monitored by means of two sensors. Moreover, a constant check of the vibration, the overspeed Oberse Kevin Lossner % DorastraBe 9 r 16540 Hohen Neuendoll q Teleon 5 '~+49(0)3W9iO 89 57 ,r- - 25 of the rotor and the gearbox and monitoring of the operating control system (watch dog) take place. The self-holding relay 61.1 and various reset switches 61.2, 61.3, 5 etc. are connected in parallel to each other and in series with respect to the switches 46.1, 46.2, 46.3, .. 47 and the other switches 56.1, 56.2, 56.3, etc. in order to enable the restart of the wind power plant after a safety shutdown by the emergency shutdown device NA or the safety shutdown device SA. Various 10 reset switches 61.2, 61.3, etc. are provided for this. These reset switches 61.2, 61.3, etc. can be designed both as mechanically activatable switches at the appropriate locations, for example in a top box or in the ground box. Moreover, there is also a reset switch for a network return. The self-holding switch 61.1 is closed during 15 the proper operation of the wind power plant. Fig. 3 shows the safety chain 20 in a currentless state. As a further reset switch according to the invention, the safety chain 20 has a reset switch 62, which is switched remotely by means of 20 the operating device 41 of a remote monitoring control center shown schematically in Fig. 3. A safety shutdown is performed through activation of the sensor-switched switches 56.1, 56.2, 56.3, etc. in that the relays 58, 59 fall so that according to the inventive concept the reset switch 62 is remotely activated after checking in the 25 remote monitoring control center by means of the operating device 41, whereby the wind power plant 10 is restarted. This resets the safety chain 20 if all sensors are error-free. The safety shutdown initiated by the safety shutdown device SA also executes corresponding brake programs for the parts of the wind power plant. 30 Oberset Kevin Lossner 10 COorastraBe 9 16540 Hohen Neuendor (0= oe*49(0)330350 88 5 - 26 List of References 9 Rotor hub 10 Wind power plant 5 11 Tower 12 Rotor 13 Rotor shaft 14 Rotor blade 15 Operating control 10 15' Operating control with integrated safety monitoring system 16 Safety monitoring system 17 Controller 18 Blade adjustment 15 19 Mechanical brake 20 Safety chain 21 Electrical components 22 Fast shaft 23 Generator (with rotor and stator) 20 24 Gearbox 25 Network 26 Data connection 27 Data connection 28 Angle adjustment 25 29 Rotation direction 30 Interference signal 31 Wind 32 Connection line 33 Connection line 30 34 Connection line 41 Operating device 42 Camera Oberset Kevin Lossner 0) DorastrafuendoI 1 6 5 4 0OHohen Teleton

C)

-27 43 Camera 44 Sensor 45 Voltage supply 46.1, 46.2, 46.3 Switch 47 Key-operated switch 48 Relay (emergency off) 49 Relay (emergency off) 56.1, 56.2, 56.3 Switch 61.1 Self-holding switch 10 61.2, 61.3 Reset switch 62 Reset switch NA Emergency shutdown device SA Safety shutdown device 58 Relay (safety off) 15 59 Relay (safety off) ,0 O berse x Kevin Lossner Dorastra~e 9 16540 Hohen Neuendorf 0 e49(0)33 50 88 57 I.. *

Claims

1. A method for the operation of a wind power plant (10), wherein in particular the wind power plant (10) will be or is shut down after a shutdown signal is triggered by a safety shutdown device (20) that is logically superordinate to an operating 20 control system, characterized in that the wind power plant (10) is released for operation after a safety shutdown by means of an operating device (41) that is spatially separated from the wind power plant (10). 25 2. A method according to claim 1, characterized in that after the safety shutdown and before the release of the wind power plant (10) the wind power plant (10) is checked remotely based on predetermined, in particular current, operating data on and/or from the wind power plant (10). 30

3. A method according to claim 1 or 2, characterized in that the presence of people on or in the wind power plant (10) is yoersetze, jee011 (D -29 checked after and/or during the safety shutdown of the wind power plant (10).

4. A method according to one of claims 1 through 3, characterized 5 in that the release of the wind power plant (10) is documented.

5. A method according to one of claims 1 through 4, characterized in that the wind power plant (10) is released for operation after unlocking of an, in particular person-related and/or function 10 error-related and/or hardware-related security code.

6. A method according to one of claims 1 through 5, characterized in that the operating device (41) is notified after and/or during a safety shutdown of the wind power plant (10). 15

7. A method according to one of claims 1 through 6, characterized in that the number of releases of the wind power plant (10) will be or is limited within a predetermined period of time. 20 8. An energy supply system with at least one wind power plant (10), characterized in that an operating device (41) spatially separated from the wind power plant (10) is provided such that by means of the operating device (41) the wind power plant (10) will be or is released for operation after a safety shutdown 25 triggered in particular by a safety shutdown device that is logically superordinate to the operating control system.

9. An energy supply system according to claim 8, characterized in that a locking device is provided on the wind power plant, 30 wherein upon activation of the locking device a release of the wind power plant will be or is locked by means of the operating device. bersetzer ~2, 6 s~e ye', - 30 10. An energy supply system according to claim 9, characterized in that the locking device is designed as a service switch. 5 11. An energy supply system according to claim 9 or 10, characterized in that upon activation of the locking device, the access of the operating device to the reset function of a safety chain and/or a safety system of the wind power plant will be or is blocked. 10

12. An energy supply system according to one of claims 8 through 11, characterized in that the method is executed according to one of claims 1 through 7. 15 13. A wind power plant (10), characterized in that a locking device is provided on the wind power plant (10), wherein upon activation of the locking device a release of the wind power plant (10) will be or is blocked by means of an operating device (41) after a safety shutdown. 20

14. A wind power plant (10) according to claim 13, characterized in that the locking device is designed as a service switch.

15. A wind power plant (10) according to claim 13 or 14, 25 characterized in that upon activation of the locking device, the access of the operating device (41) to the reset function of a safety chain (20) and/or a safety system of the wind power plant (10) will be or is blocked. 30 16. A wind power plant (10) according to one of claims 13 through 15, characterized in that, after activation [sic] the locking device, the operating device for release of the wind power plant I Obersetz, 0 O S S 0 eeOj7 -31 (10) is or will be unlocked after entry of a password or transmission of an authorization.

17. A wind power plant (10) according to one of claims 13 through 5 16, characterized in that after activation [sic] the locking device the operating device (41) for the release of the wind power plant (10) is or will be unlocked after checking for the presence or absence of people in and/or on the wind power plant (10) and after the determined absence of people. 10

18. A safety chain (20) of a wind power plant (10), characterized in that a reset switch (62) is provided, which after the triggering of a safety shutdown of the wind power plant (10) will be or is activated or is activatable by means of or in connection with an 15 operating device (41) that is spatially separated from the wind power plant (10) such that the wind power plant (10) is released for operation after the safety shutdown.

19. A safety chain (20) according to claim 18, characterized in that 20 at least one manually activatable switch (46.1, 46.2, 46.3, 47) of an emergency shutdown device (NA) is provided, such that after manual activation of the switch (46.1, 46.2, 46.3, 47) a safety shutdown of the wind power plant (10) is triggered. 25 20. A safety chain (20) according to claim 18 or 19, characterized in that at least one switch (56.1, 56.2, 56.3) of a safety shutdown device (SA) that is activatable by a sensor is provided, such that after activation of the switch (56.1, 56.2,

56.3) a safety shutdown of the wind power plant (10) is 30 triggered. 21. A safety chain (20) according to one of claims 18 through 20, )berset, -32 characterized in that the at least one switch (46.1, 46.2, 46.3, 47) of the emergency shutdown device (NA) and the at least one switch (56.1, 56.2, 56.3) of the safety shutdown device (SA) are series-connected. 5 22. A safety chain (20) according to one of claims 18 through 21, characterized in that in the case of an emergency shutdown by the emergency shutdown device (NA) a release of the wind power plant is or will be blocked by the operating device (41). 10 23. A safety chain (20) according to one claims 18 through 22, characterized in that, in the case of an emergency shutdown by the emergency shutdown device (NA), the rotor is brought to a standstill by means of brake devices, in particular mechanical 15 brake devices, and/or components are rendered voltage-free. 24. A safety chain (20) according to one of claims 18 through 22, characterized in that in the case of a safety shutdown by the safety shutdown device (SA) the rotor is brought into a low 20 load mode or state, in particular trundling state, by brake devices. 25. A safety chain (20) according to one of claims 18 through 24, characterized in that at least one other reset switch (61.1, 61.2, 25 61.3) is provided. 26. A safety chain (20) according to one of claims 18 through 25, characterized in that several reset switches (61.1, 61.2, 61.3, 62) are connected in parallel to each other. 30 27. A safety chain (20) according to one of claims 18 through 26, characterized in that the emergency shutdown device (NA) hbersete, o. v0 3 'W -h - 33 and/or the safety shutdown device (SA) each have at least one, in particular two, switch relays (48, 49, 58, 59). 28. A safety chain (20) according to one of claims 18 through 27, 5 characterized in that a power supply, in particular an uninterruptible power supply (45) is provided. 29. A safety chain (20) according to one of claims 18 through 28, characterized in that the safety chain (20) is designed as a 10 wired switch, in particular a hard-wired switch. 30. A wind power plant (10) with a safety chain (20) according to one of claims 18 through 29. SbersetzO yekv 0 0'f AO bB r